This class combines the keystone-manage bootstrap command
from init, the keystone::endpoint functionality that manages
the keystone endpoints and the keystone::roles::admin class
that manages users and projects.
This is one of the steps to make sure we only have a single
point of entry for bootstrapping (keystone-manage bootstrap)
and then only managing resources after that.
This is especially required since we are getting rid of the
admin token and cannot manage resources before keystone-manage
bootstrap has created the user, project, service and endpoints
for us.
These resources should always be in the default domain and
deployments should manage domain specific configuration themselves
using the provider resources.
This class uses the default values from the keystone-manage
bootstrap command.
In the past puppet-keystone has always created a openstack project
that is assumed as a admin project even though the bootstrap command
creates the admin project. Since this uses the default values from
the bootstrap command we should move away from having an openstack
project, if we need that in testing it should be created there and
not in the default deployment.
Depends-On: https://review.opendev.org/#/c/698528/
Change-Id: I683fcdd743bddf6d4e989dd7e7c553db745934db
Now that the v2.0 API has been removed, we don't have a reason to
include deployment instructions for two separate applications on
different ports.
Change-Id: Ifb06f5f66db45312c87b07aa77195c77d9a2668c
Option "verbose" from group "DEFAULT" is deprecated for removal.
The parameter has no effect.
-Deprecated verbose for logging and init
-Remove verbose in examples and README
-Remove verbose from tests.
If this option is not set explicitly, there is no such warning.
Change-Id: I2f554c07f71458894aaa5d8079285ac92d0f04a3
Implements blueprint keystone-domain-configuration
Adds a provider able to configure multiple domains and two parameters in
keystone class to setup a working multi-domains configuration.
The keystone_config type has been refactored into a mixin to be shared
by keystone_config and keystone_domain_config.
The provider, even though it is inheriting from openstack_config (and
not keystone_config because it hard code the path), has required more
new code. The problem is that we have several configuration files to
work with (one per domain) which is unusual.
The self.prefetch method is required to check the current catalog. If
it's changing the Keystone_config[identity/domain_config_dir] we take it
directly into account without the need for another run.
Keystone_config[identity/domain_config_dir] configuration and the
associated directory are autorequired.
Change-Id: I5e4b298460ee592640af59ac9dcbefa3daf98098
